them. [laughter] >> but you mentioned oil and natural gas. >> yeah, let's take energy, let's just take the energy sector because it's an example where you already have ferc, and it has its regulatory authorities, some of which already touch on cyber. so when we do a deep dive, we're looking at, well, what's already happening in that particular sector. do the -- >> and do you look at, too, if it's any good? >> absolutely. have we actually done what we need to do -- >> yeah. >> -- to make sure the sector is as secure as possible. >> um, and do you think that this -- first of all, i want to qualify, is it going to be a new executive order or an expansion on directives that have already been put into place? >> again, i don't want to go into too much detail here, but i would say it is in the format of a new order. >> okay, okay. and are you still hopeful about legislation in the long term too? >> i think we have to. as i said, the executive can only do so much. legislation does need to be addressed. i think one of the benefits of the debate in congress this past spring and summer was, i mea
